CVE-2005-0103

Опубликовано: 24 янв. 2005

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

PHP remote file inclusion vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to execute arbitrary PHP code by modifying a URL parameter to reference a URL on a remote web server that contains the code.

Ссылки

http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html
Patch
Vendor Advisory
http://marc.info/?l=bugtraq&m=110702772714662&w=2
http://secunia.com/advisories/13962/
Patch
Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200501-39.xml
http://www.redhat.com/support/errata/RHSA-2005-099.html
Patch
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-135.html
Patch
Vendor Advisory
http://www.squirrelmail.org/security/issue/2005-01-19?PHPSESSID=8af117822fb1ca3aa966a64248b5d223
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/19037
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10670
http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html
Patch
Vendor Advisory
http://marc.info/?l=bugtraq&m=110702772714662&w=2
http://secunia.com/advisories/13962/
Patch
Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200501-39.xml
http://www.redhat.com/support/errata/RHSA-2005-099.html
Patch
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-135.html
Patch
Vendor Advisory
http://www.squirrelmail.org/security/issue/2005-01-19?PHPSESSID=8af117822fb1ca3aa966a64248b5d223
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/19037
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10670

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:squirrelmail:squirrelmail:1.0.4:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.0.5:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.2.0:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.2.2:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.2.3:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.2.4:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.2.5:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.2.6:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.2.7:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.2.8:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.2.9:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.2.10:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.2.11:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.4:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.4.0:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.4.1:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.4.2:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.4.3:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.4.3_rc1:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.4.3a:*:*:*:*:*:*:*

EPSS

Процентиль: 82%

0.02342

Низкий

7.5 High

CVSS2

Дефекты

CWE-94

Связанные уязвимости

CVE-2005-0103

ubuntu

больше 21 года назад

CVE-2005-0103

redhat

больше 21 года назад

CVE-2005-0103

debian

больше 21 года назад

PHP remote file inclusion vulnerability in webmail.php in SquirrelMail ...

GHSA-fp58-4cw2-v55f

github

около 4 лет назад

EPSS

Процентиль: 82%

0.02342

Низкий

7.5 High

CVSS2

Дефекты

CWE-94